Security audit
@openclaw/comfy-provider
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent ComfyUI media-generation provider that uses expected network and credential access for local or cloud workflow execution.
Install only if you intend to use ComfyUI workflows. For cloud or custom endpoints, make sure the base URL and headers/API keys are for a service you trust, because prompts, workflow details, optional reference images, and generated-output requests will be sent there.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.